$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1212/I9uSXffH-pwTghGYA_o9PiW31PU.roa File: I9uSXffH-pwTghGYA_o9PiW31PU.roa (raw, json) Hash identifier: nwRRWYa9JDWQiBl3beIie/BcmhzWO1BFjAfKhqo9ItM= Subject key identifier: 23:DB:92:5D:F7:C7:FA:9C:13:82:11:98:03:FA:3D:3E:25:B7:D4:F5 Certificate issuer: /CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86 Certificate serial: 1622 Authority key identifier: 28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/I9uSXffH-pwTghGYA_o9PiW31PU.roa Signing time: Sat 06 Sep 2025 08:03:20 +0000 ROA not before: Sat 06 Sep 2025 08:03:20 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 149628 IP address blocks: 45.116.96.0/22 maxlen: 22 103.23.164.0/22 maxlen: 22 103.56.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 23:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5666 (0x1622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86 Validity Not Before: Sep 6 08:03:20 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=23DB925DF7C7FA9C1382119803FA3D3E25B7D4F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:02:f5:7a:ca:b2:d2:bb:2b:5a:b9:d9:13:88: 04:bc:58:c5:9d:13:2c:df:dd:c5:52:62:e9:50:3c: b4:0d:91:5c:7c:57:f5:0d:bc:9e:57:db:f7:ef:90: 9d:6f:8a:01:9f:10:52:1e:36:45:2e:5e:b1:ae:fe: 65:c5:d7:7b:a0:40:0f:f1:3a:75:39:97:4b:d9:85: 0c:e4:2c:33:fb:61:10:54:d3:1a:48:ae:af:ef:17: 01:a5:40:60:a5:a8:a4:7a:44:36:d7:13:e0:e7:52: 4e:90:ff:60:df:98:5a:13:ed:19:1b:9a:4a:de:59: d2:77:b0:6e:26:aa:47:1d:30:8f:65:8d:d7:eb:26: 11:5f:1d:58:ee:b9:1f:fc:a6:fc:a2:7e:2b:3c:fd: c7:ce:cf:8c:13:cf:8d:32:ea:83:ea:f8:17:71:9a: 74:f6:2d:e9:7e:03:12:85:74:ce:32:8c:54:0d:44: 83:2c:2a:1b:d2:21:e9:59:59:cd:c4:15:1f:1f:26: 78:f3:7f:e1:51:95:ef:bd:92:90:e0:ca:67:e2:de: 5f:07:6f:09:03:51:4a:c3:81:6d:78:24:f2:45:7a: ea:71:5a:4a:ae:3e:79:f7:9f:75:f4:e7:9c:c2:d6: fb:4d:cc:49:d4:d8:30:5d:fa:62:61:84:46:b7:00: 09:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DB:92:5D:F7:C7:FA:9C:13:82:11:98:03:FA:3D:3E:25:B7:D4:F5 X509v3 Authority Key Identifier: keyid:28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/I9uSXffH-pwTghGYA_o9PiW31PU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.116.96.0/22 103.23.164.0/22 103.56.140.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:98:bd:7e:e7:d9:54:7b:f1:72:ae:47:45:11:43:50:a7:bf: c2:de:13:55:5b:a0:57:73:83:7a:67:fa:12:d6:fa:67:22:6e: 58:1c:5c:2d:d2:c5:0f:9d:0b:d8:3f:9a:53:3c:54:61:70:a4: ba:84:e2:d8:ef:30:07:6c:8d:a0:00:91:2a:89:61:9a:a7:6a: f6:a9:5b:d7:b5:27:54:e5:1b:11:01:e6:2c:bc:9c:5f:c7:3c: 64:d0:b0:ac:de:93:3c:7a:45:f3:90:45:20:24:1d:d4:2d:ac: 25:48:f3:b9:e3:ad:d8:fe:e0:48:19:a2:b2:7d:fd:55:7f:a4: d0:44:a0:f1:b7:a1:ba:a5:96:c2:c2:b3:6e:f3:29:39:78:9b: df:46:7f:34:e9:d4:ec:20:71:0e:bf:99:d0:6f:d6:c7:20:23: 37:c3:f1:c0:3f:f9:7b:86:0a:bc:14:38:18:a6:23:21:16:70: f8:9e:a8:32:f5:77:b6:e1:b0:31:23:5f:cb:48:02:19:ec:4c: 9c:dd:37:3b:3a:1c:cb:fe:ed:fa:c6:f3:4f:b5:01:08:73:ac: 60:3a:3a:3d:10:14:da:16:af:80:99:fb:7c:57:26:e7:f8:b3: ca:2e:4f:d0:7f:91:f6:0f:67:5e:73:a9:d2:b5:49:3a:ee:0d: 91:f7:14:75 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgICFiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjgy MDI1OEFCNjVGRjYxRkQ1RDY2RDk1OTY0RjQ4RUZBMzVEQ0M4NjAeFw0yNTA5MDYw ODAzMjBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDIzREI5MjVERjdDN0ZB OUMxMzgyMTE5ODAzRkEzRDNFMjVCN0Q0RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD4AvV6yrLSuytaudkTiAS8WMWdEyzf3cVSYulQPLQNkVx8V/UN vJ5X2/fvkJ1vigGfEFIeNkUuXrGu/mXF13ugQA/xOnU5l0vZhQzkLDP7YRBU0xpI rq/vFwGlQGClqKR6RDbXE+DnUk6Q/2DfmFoT7RkbmkreWdJ3sG4mqkcdMI9ljdfr JhFfHVjuuR/8pvyifis8/cfOz4wTz40y6oPq+BdxmnT2Lel+AxKFdM4yjFQNRIMs KhvSIelZWc3EFR8fJnjzf+FRle+9kpDgymfi3l8HbwkDUUrDgW14JPJFeupxWkqu Pnn3n3X055zC1vtNzEnU2DBd+mJhhEa3AAnFAgMBAAGjggH/MIIB+zAdBgNVHQ4E FgQUI9uSXffH+pwTghGYA/o9PiW31PUwHwYDVR0jBBgwFoAUKCAlirZf9h/V1m2V lk9I76NdzIYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx Mi9LQ0FsaXJaZjloX1YxbTJWbGs5STc2TmR6SVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0tDQWxpclpmOWhfVjFtMlZsazlJNzZOZHpJWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMTIvSTl1U1hmZkgtcHdU Z2hHWUFfbzlQaVczMVBVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEw EgMEAi10YAMEAmcXpAMEAmc4jDANBgkqhkiG9w0BAQsFAAOCAQEAfZi9fufZVHvx cq5HRRFDUKe/wt4TVVugV3ODemf6Etb6ZyJuWBxcLdLFD50L2D+aUzxUYXCkuoTi 2O8wB2yNoACRKolhmqdq9qlb17UnVOUbEQHmLLycX8c8ZNCwrN6TPHpF85BFICQd 1C2sJUjzueOt2P7gSBmisn39VX+k0ESg8behuqWWwsKzbvMpOXib30Z/NOnU7CBx Dr+Z0G/WxyAjN8PxwD/5e4YKvBQ4GKYjIRZw+J6oMvV3tuGwMSNfy0gCGexMnN03 Ozocy/7t+sbzT7UBCHOsYDo6PRAU2havgJn7fFcm5/izyi5P0H+R9g9nXnOp0rVJ Ou4NkfcUdQ== -----END CERTIFICATE-----Generated at Tue Nov 4 21:45:44 2025 by rpki-client